CVEvulnerability
CVE-2006-0424
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-01-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Description
BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.
Affected configurations
• bea weblogic server 6.1
• bea weblogic server 7.0
• bea weblogic server 8.1
References
- http://dev2dev.bea.com/pub/advisory/168 Patch, Vendor Advisory
- http://secunia.com/advisories/18592 Patch, Vendor Advisory
- http://securitytracker.com/id?1015528 Patch
- http://www.osvdb.org/22776 www.osvdb.org
- http://www.securityfocus.com/bid/16358 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24295 exchange.xforce.ibmcloud.com
- http://dev2dev.bea.com/pub/advisory/168 Patch, Vendor Advisory
- http://secunia.com/advisories/18592 Patch, Vendor Advisory
- http://securitytracker.com/id?1015528 Patch
- http://www.osvdb.org/22776 www.osvdb.org
- http://www.securityfocus.com/bid/16358 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0313 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24295 exchange.xforce.ibmcloud.com